Skip to content

Commit

Permalink
cosign: update to release v1.2.1 (#28)
Browse files Browse the repository at this point in the history
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
  • Loading branch information
cpanato committed Sep 21, 2021
1 parent 7436096 commit f700e6f
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 5 deletions.
4 changes: 2 additions & 2 deletions README.md
Expand Up @@ -13,7 +13,7 @@ Add the following entry to your Github workflow YAML file:
```yaml
uses: sigstore/cosign-installer@main
with:
cosign-release: 'v1.2.0' # optional
cosign-release: 'v1.2.1' # optional
```

Example using a pinned version:
Expand All @@ -40,7 +40,7 @@ jobs:
- name: Install Cosign
uses: sigstore/cosign-installer@main
with:
cosign-release: 'v1.2.0'
cosign-release: 'v1.2.1'
- name: Check install!
run: cosign version
```
Expand Down
6 changes: 3 additions & 3 deletions action.yml
Expand Up @@ -9,7 +9,7 @@ inputs:
cosign-release:
description: 'Cosign release version to use in the actions.'
required: false
default: 'v1.2.0'
default: 'v1.2.1'
runs:
using: "composite"
steps:
Expand All @@ -20,8 +20,8 @@ runs:
mkdir -p $HOME/.cosign
pushd $HOME/.cosign
bootstrap_version='v1.2.0'
expected_bootstrap_version_digest='690e9d6220aa715b61e332a0efefb60f4f4889cb8c0d0195d28a406425d617f0'
bootstrap_version='v1.2.1'
expected_bootstrap_version_digest='490cb1941aa317cd24a0bd9f2fe38932805dbaaba0ae89c12ec8138d15bdd8a0'
curl -L https://storage.googleapis.com/cosign-releases/${bootstrap_version}/cosign-linux-amd64 -o cosign
shaBootstrap=$(sha256sum cosign | cut -d' ' -f1);
if [[ $shaBootstrap != ${expected_bootstrap_version_digest} ]]; then exit 1; fi
Expand Down

0 comments on commit f700e6f

Please sign in to comment.